Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS401818.roa
File: AS401818.roa (raw, json)
Hash identifier: klX27I139G99jqFPJvwHR/eRCKonxAPTxk1hjs74OE8=
Subject key identifier: 07:22:84:45:98:36:62:E5:3A:00:40:29:3F:FE:3C:89:FE:B7:B1:69
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 1DAC6CA92D72A10D82F3133A5A6029238679209A
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS401818.roa
Signing time: Tue 14 Oct 2025 20:26:43 +0000
ROA not before: Tue 14 Oct 2025 20:21:43 +0000
ROA not after: Tue 13 Oct 2026 20:26:43 +0000
asID: 401818
IP address blocks: 2a0f:85c1:da0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ac:6c:a9:2d:72:a1:0d:82:f3:13:3a:5a:60:29:23:86:79:20:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 14 20:21:43 2025 GMT
Not After : Oct 13 20:26:43 2026 GMT
Subject: CN=07228445983662E53A0040293FFE3C89FEB7B169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2b:0c:98:bd:9e:2d:c2:34:0d:dd:f3:24:d4:
67:2a:b1:35:42:43:ab:bf:86:74:d7:24:71:d1:82:
ec:80:94:40:99:58:a0:6f:9a:7e:89:4b:57:bb:37:
c1:3c:ad:5d:f7:fd:13:3a:05:6e:05:a1:a9:74:02:
9b:b7:4c:5e:f4:d3:d4:7e:1b:b0:0e:c8:01:c7:14:
a9:6c:ee:23:a9:c6:d7:ff:b6:14:d8:2e:94:32:26:
a7:a0:ff:24:09:18:1c:31:bd:3c:b3:2f:29:dd:af:
18:0e:a2:8c:28:ec:63:d0:68:af:a9:dc:bf:a2:fc:
bf:7c:15:5c:7a:b3:6d:66:f9:9f:a2:f3:a9:6b:4f:
98:9a:e7:b6:b5:c2:24:4c:e8:fb:22:51:7e:2c:5b:
22:76:47:e3:73:15:35:7f:02:31:04:fa:60:e3:cc:
67:c6:11:f2:ed:b1:42:8e:4f:34:b7:96:07:ee:2c:
c5:fe:c5:80:c0:5f:1a:1a:0c:96:43:60:f3:5b:6e:
a1:e1:d2:f8:ba:37:14:f3:41:20:4b:1d:0c:6d:a4:
2d:d6:db:7b:a3:93:84:0e:a5:e1:73:e1:84:64:9c:
ed:df:8f:21:27:84:b2:9b:f4:be:a5:85:5c:e7:91:
2e:98:54:3a:73:68:ed:c9:37:39:a7:5a:e7:f7:15:
df:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:22:84:45:98:36:62:E5:3A:00:40:29:3F:FE:3C:89:FE:B7:B1:69
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS401818.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:da0::/44
Signature Algorithm: sha256WithRSAEncryption
28:1d:bb:47:f3:10:5c:89:03:0b:b1:d7:17:fb:98:b5:06:cc:
33:c0:8f:f2:2e:a4:98:01:5d:44:70:c5:f1:84:25:0d:9b:ac:
4a:29:05:5c:cf:9f:c6:06:3b:e6:dd:95:8d:4e:01:7f:9a:93:
33:07:a8:b8:28:d2:8d:64:ad:3f:f2:0d:55:4b:fd:f0:45:bd:
55:31:23:18:da:da:d2:71:9b:7b:98:64:25:70:56:af:41:7c:
3b:38:14:91:07:10:fa:b8:e4:ea:e0:6d:3f:b2:3e:d8:18:4c:
a1:3d:35:67:70:9f:91:f9:76:72:74:8a:3c:27:93:ec:5e:9f:
e1:9e:bb:cb:7c:cc:c6:9a:2c:49:77:60:9a:19:cc:fe:21:4f:
a9:d3:2e:1c:ba:41:22:ed:a5:93:52:83:e0:98:ca:a6:c0:d5:
31:f7:15:1b:7c:07:3d:eb:68:59:6f:1f:31:3c:b2:f8:b9:3c:
64:22:13:f5:9f:6a:31:c1:64:6a:83:9a:90:2e:e0:59:21:e2:
45:84:56:1e:0e:4a:2b:47:8d:72:90:ff:45:8c:93:3c:8c:98:
ca:0c:bb:61:50:5c:5e:34:bf:6c:90:25:9f:34:2a:2c:53:90:
1b:48:68:75:cc:f4:f2:ba:95:40:5d:3b:f4:ec:b4:3b:11:c8:
0b:88:96:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:55:24 2025 by rpki-client